Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Sign emails sent by keyserver

Open
#32 4 comments 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
35/100
Issue type
Feature
Clarity
Clearly specified
Activity status
Stale
Tech stack
javascript
Domain
backend, security

Research direction

Start in src/email/email.js at the call around line 49 and read the nodemailer-openpgp signingKey documentation. Confirm how the keyserver's public key would be hosted by the keyserver, then verify that outgoing messages are signed and retain their existing delivery behavior.

Written by the indexing model from the issue text.

Description

It seems natural to sign the messages being sent out :)
Luckily, the api used by keyserver claims to support this already: https://www.npmjs.com/package/nodemailer-openpgp
Adding signingKey to the call here https://github.com/mailvelope/keyserver/blob/master/src/email/email.js#L49 should do the trick.
The keyserver's public key can be hosted by the keyserver itself; the benefit of signing the message is just to give users more assurance of the origin of the message before they blindly click a link which has been sent to them.

Dominant language
JavaScript
Stars
481
Forks
81
PR merge metrics
No merged PRs in 30d

Getting set up

  • Ships a Dockerfile or Docker Compose file
  • No pull request template
  • No contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from mailvelope/keyserver

All issues in mailvelope/keyserver

Similar issues

More JavaScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.